$ rpki-client -vvf rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft File: o_EASaOTr53KRFlmZBZrh0Avgio.mft (raw, json) Hash identifier: gjyNYYXDTSZFi+L9wqdOnPdR6YVPIEID+3MUa1xTy8Q= Subject key identifier: CE:96:9E:4A:50:16:CB:02:77:B5:97:28:46:88:55:38:6E:3F:8A:CA Authority key identifier: A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A Certificate issuer: /CN=A91877A6/serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft Manifest number: 41 Signing time: Wed 05 Nov 2025 07:38:56 +0000 Manifest this update: Wed 05 Nov 2025 07:38:56 +0000 Manifest next update: Wed 12 Nov 2025 07:38:56 +0000 Files and hashes: 1: o_EASaOTr53KRFlmZBZrh0Avgio.crl (hash: KAVpvQKz6FJzW5AxiWGisQLX72atz8bubQFBE0g2GCw=) 2: 4DC60A785C7F11F089D20138C4F9AE02.roa (hash: 6Vnq1spFXaLfT9Zg1ghh5PPz6XLDWciXVK572d6VJmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91877A6, serialNumber=A3F10049A393AF9DCA44596664166B87402F822A Validity Not Before: Nov 5 07:38:56 2025 GMT Not After : Nov 12 07:38:56 2025 GMT Subject: CN=690aff10-5309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:bc:2a:08:1d:9b:ce:aa:61:af:b7:90:93: bf:98:98:50:56:ee:dc:d7:51:ea:22:f5:01:fe:fd: 04:4e:09:2e:ac:5e:4b:fe:3c:6e:89:6d:23:13:64: 54:94:03:ad:2a:0b:82:ed:a0:b9:43:81:d9:4d:91: a8:8d:22:17:97:b7:b8:ad:c4:76:87:d8:57:06:59: 08:84:8d:25:f5:2c:c7:8f:e5:5a:b9:2d:39:3c:1b: 0c:ef:bc:84:09:2d:a6:e8:0b:ef:18:df:ed:a2:aa: 8e:7a:0c:7e:51:4f:09:e7:b5:36:88:24:69:f7:82: ba:05:28:76:1a:af:af:26:de:15:3f:df:65:08:83: 63:2b:93:66:80:81:c4:77:e3:ba:11:21:01:0a:68: d2:67:41:b8:ef:16:27:3c:6b:2d:5e:d4:80:95:93: b8:70:da:b9:f1:b7:5c:21:81:9b:f6:cd:20:96:43: 6f:57:71:59:1c:e7:df:f6:b3:0a:3d:c0:77:47:bf: 1c:74:20:2e:37:6a:e7:f5:9c:77:ec:0d:dc:63:72: 03:78:89:f1:0a:72:0c:f3:05:04:93:49:dc:c0:a6: 2f:38:39:cc:27:a0:5e:3f:4a:ca:45:52:dd:ef:2d: ed:ab:67:54:14:e6:55:24:18:2f:38:47:23:ad:13: c1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:96:9E:4A:50:16:CB:02:77:B5:97:28:46:88:55:38:6E:3F:8A:CA X509v3 Authority Key Identifier: keyid:A3:F1:00:49:A3:93:AF:9D:CA:44:59:66:64:16:6B:87:40:2F:82:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o_EASaOTr53KRFlmZBZrh0Avgio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91877A6/BDEE7B885C7E11F0A5C36036C4F9AE02/o_EASaOTr53KRFlmZBZrh0Avgio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e6:23:f0:10:95:7b:6b:2b:68:5d:1f:46:5b:b7:30:1c:98: 0c:cb:80:14:4a:fa:40:8f:1b:43:9b:2a:87:61:a3:c8:8a:9f: b1:1c:ab:ea:75:9b:ea:ab:de:03:2f:c5:60:4b:20:46:fc:b6: 72:50:77:0e:ec:d5:ad:de:dc:76:d7:33:5a:b4:b3:b1:e8:40: 70:bf:65:84:bd:e9:6f:8b:16:1d:30:27:e2:21:65:cf:e1:8a: d7:2b:97:32:3e:99:1d:1d:be:88:bc:35:ca:44:41:a0:43:7c: 0a:6b:fb:f9:a0:38:08:d9:14:ca:6d:d6:26:e4:dc:e9:4c:d7: 85:88:c5:38:f7:3d:56:bc:6d:2a:7b:1b:b9:9b:00:9c:9d:b3: 93:34:6d:63:4d:e5:3a:bb:f3:3e:3a:7e:12:a3:68:c6:c4:90: 18:e5:82:a9:44:07:70:c1:1e:82:d7:87:54:11:25:07:73:07: 79:40:86:ac:27:fc:15:8c:65:da:e7:ec:d5:ca:16:9a:92:94: e0:17:55:08:af:39:c6:3a:37:f4:db:bd:b3:d7:d6:eb:fc:d2: 9e:cd:9d:a8:f3:ae:63:a7:a3:3b:ea:9d:30:e0:1a:72:0e:71: 16:64:45:21:bb:36:d6:d6:ca:0d:12:5a:7b:ea:9e:09:6e:77: cc:e8:f8:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzdBNjExMC8GA1UEBRMoQTNGMTAwNDlBMzkzQUY5RENBNDQ1OTY2NjQxNjZCODc0 MDJGODIyQTAeFw0yNTExMDUwNzM4NTZaFw0yNTExMTIwNzM4NTZaMBgxFjAUBgNV BAMTDTY5MGFmZjEwLTUzMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1OLwqCB2bzqphr7eQk7+YmFBW7tzXUeoi9QH+/QROCS6sXkv+PG6JbSMTZFSU A60qC4LtoLlDgdlNkaiNIheXt7itxHaH2FcGWQiEjSX1LMeP5Vq5LTk8GwzvvIQJ LaboC+8Y3+2iqo56DH5RTwnntTaIJGn3groFKHYar68m3hU/32UIg2Mrk2aAgcR3 47oRIQEKaNJnQbjvFic8ay1e1ICVk7hw2rnxt1whgZv2zSCWQ29XcVkc59/2swo9 wHdHvxx0IC43auf1nHfsDdxjcgN4ifEKcgzzBQSTSdzApi84OcwnoF4/SspFUt3v Le2rZ1QU5lUkGC84RyOtE8HXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzpaeSlAW ywJ3tZcoRohVOG4/isowHwYDVR0jBBgwFoAUo/EASaOTr53KRFlmZBZrh0Avgiow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3N0E2L0JERUU3Qjg4NUM3 RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUzS1JGbG1aQlpyaDBBdmdp by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvb19FQVNhT1RyNTNLUkZsbVpCWnJoMEF2Z2lvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 N0E2L0JERUU3Qjg4NUM3RTExRjBBNUMzNjAzNkM0RjlBRTAyL29fRUFTYU9UcjUz S1JGbG1aQlpyaDBBdmdpby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITmI/AQlXtrK2hdH0ZbtzAcmAzLgBRK+kCPG0ObKodho8iKn7Ecq+p1 m+qr3gMvxWBLIEb8tnJQdw7s1a3e3HbXM1q0s7HoQHC/ZYS96W+LFh0wJ+IhZc/h itcrlzI+mR0dvoi8NcpEQaBDfApr+/mgOAjZFMpt1ibk3OlM14WIxTj3PVa8bSp7 G7mbAJyds5M0bWNN5Tq78z46fhKjaMbEkBjlgqlEB3DBHoLXh1QRJQdzB3lAhqwn /BWMZdrn7NXKFpqSlOAXVQivOcY6N/TbvbPX1uv80p7NnajzrmOnozvqnTDgGnIO cRZkRSG7NtbWyg0SWnvqnglud8zo+CM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:31:22 2025 by rpki-client